no DHCP when applying access list

[Karsten Iwen · Accepted solution]

Add the following line to your ACL and DHCP should work:

ip access-list extended Block_Facebook
  1 permit udp any eq bootpc any eq bootps

[Addey Salameh]

Thank You guys you helped me alot :D

[houtan haddadlarijani · Accepted solution]

Hi,

You blocked DHCP discover packet with your current ACL, Discover packet has sender IP of 0.0.0.0 (port 68) and destination IP of 255.255.255.255 (port67) which is being blocked by this ACL. Adding line 

 permit udp any eq 68 host 255.255.255.255 eq 67

can solve your problem. (There are other possibilities for allow DHCP in ACLs)

Anyway, why u did not use "name-server" to simplify ur ACL with only 1 line to block facebook?

HTH,

Houtan